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Sir: 



INFORMATION DISCLOSURE STATEMENT 
UNDER §1.97 (c) WITH FEE 



Pursuant to 37 C.F.R. §§ 1.56, 1.97 and 1.98, Applicant (s) 
wish to call the following documents (a copy of each non-US 
Patent document is enclosed) to the attention of the Examiner. 

U.S. PATENT DOCUMENTS 





DOCUMENT NUMBER 


DATE 


NAME 


1) 


2003/0014667 


01/16/03 


Kolichtchak 



OTHER DOCUMENTS 



1) 



2) 



Finnegan, "Pop Open a Privileged Set of APIs with Windows NT 
Kernel Mode Drivers" , Microsoft Systems Journal , Microsoft 
Corp., March 1998, pages 1-24 [online]. Retrieved on July 25, 
2007 from the Internet: <URL :http : //www. microsoft . com/MS J/0398/ 
driver . aspx> . 



Vasudevan et al . , ''Cobra: Fine-grained Malware Analysis using 
Stealth Localized-executions" , 2006, pages 1-15 [online] . 
Retrieved from the Internet: <URL:http : //data.uta. edu/^ramesh/ 
pubs / IEEE - Cobra . pdf > 
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A PTO form 1449 listing these documents is enclosed. 

Citation of the above documents shall not be construed as 

1. an admission that the documents are necessarily 
prior art with respect to the instant invention; 

2. a representation that a search has been made, 
other than as described above; or 

3. an admission that the information cited herein 
is, or is considered to be, material to patentability as 
defined in § 1.56(b). 

Enclosed herewith is a check in the amount of $180.00 
payable to the Director of the United States Patent and 
Trademark Office, which is the amount for submission of an 
Information Disclosure Statement given in 37 C.F.R. § 1.17(p), 

The Commissioner is hereby authorized to charge any 
additional fees, which may be required to consider this paper, 
or credit any overpayment to Deposit Account No. 50-0553. 



CERTIFICATE OF MAILING 



I hereby certify that this correspondence is being deposited with 
the United States Postal Service with sufficient postage as first 
class mail in an envelope addressed to: Commissioner for 
Patents. P.O. Box 1450, Alexandria, VA 22313-1450, on August 
27. 20(n I 
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Finnegan, "Pop Open a Privileged Set of APIs with Windows NT Kernel Mode 
Drivers", Microsoft Systems Journal, Microsoft Corp., March 1998, paqes 
1-24 [online]. Retrieved on July 25, 2007 from the Internet: 
<URL :http : //www. microsoft . com/MSJ/0 3 98/driver . aspx> . 




AS 


Vasudevan et al . , "Cobra: Fine-grained Malware Analysis using Stealth 
Localized-executions" , 2006, pages 1-15 [online] . Retrieved from the 
Internet : <URL ihttp : //data .uta . edu/ -ramesh/pubs/ IEEE -Cobra .pdf> 
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Examiner Date Considered 


EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609; draw line 
through citation if not in conformance and not considered. Include copy of this form with next communication 
to appl icant ( s ) . 



